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Response to Amendment 

This office action is responsive to Applicant's amendment received on 
10/23/2006. Claims 63-66 are cancelled. Claim 67 is amended. Claims 45-62, 67, and 
70-73 are pending. 

Response to Arguments 

Applicant's arguments filed 10/23/2006 have been fully considered but they are 
not persuasive. 

Applicant argues that Fink et al. fails to teach, disclose or suggest at least 
"re-sequencing the series of multi-media data flow packets into a pseudo-random order; 
and transmitting each multi-media data flow packet in the re-sequenced series in the 
pseudo-random order" as recited in amended claims 45, 52, and 59. 

Examiner responds that Fink discloses "the encrypted portions of the packet 
header are those portions relating to the source and destination hosts 31 , and 34 and 
packet sequencing information ... the receiving ASD peer 35 restores packet in 
accordance with a prearranged protocol. The result of this process is a restored packet 
identical to the original packet created by the sending host" - Note that such restoration 
is required because packet header information such as sequence number has been 
randomized/encrypted before transmission)(col. 7, lines 1-26 and col. 9, lines 30-42). 

Fink also discloses "the ASD technique seemlessly layers with data security 
technologies such as IPSEC and Secure Socket Layer (SSL) because it only affects 
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addressing and sequencing information for translation/restoration, allowing it to be used 
to enhance existing network security systems" (col. 7, lines 1-15 and col. 9, lines 13-65). 
Fink further discloses that the encrypted byte array is repacked into the original TCP/IP 
packet header replacing the original information. The packet header at this point is said 
to be translated (i.e., re-sequenced). Once translated, the packet is transmitted across 
the Internet (i.e., note that the sequence number as part of the byte array has been 
encrypted/randomized before packet is transmitted across the Internet to the destination 
enclave; therefore, transmission takes place after the sequence number of each packet 
has been randomized)(col. 8, lines 21-45 and col. 9, lines 1-28). 

Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(e) the invention was described in a patent granted on an application for patent by another filed in the 
United States before the invention thereof by the applicant for patent, or on an international application 
by another who has fulfilled the requirements of paragraphs (1), (2), and (4) of section 371(c) of this 
title before the invention thereof by the applicant for patent. 

The changes made to 35 U.S.C. 102(e) by the American Inventors Protection Act 
of 1999 (AIPA) and the Intellectual Property and High Technology Technical 
Amendments Act of 2002 do not apply when the reference is a U.S. patent resulting 
directly or indirectly from an international application filed before November 29, 2000. 
Therefore, the prior art date of the reference is determined under 35 U.S.C. 102(e) prior 
to the amendment by the AIPA (pre-AlPA 35 U.S.C. 1 02(e)). 
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Claims 45-62 are rejected under 35 U.S.C. 102(e) as being anticipated by Fink et 
al., (U.S. Patent No. 6,826,684 and Fink hereinafter). 

Regarding claims 45 and 52, Fink discloses a method of encrypting multi-media 
data flow packets, comprising the steps of: 

receiving a series of multi-media data flow packets, each packet comprising a 
sequence number, storing the series of multi-media data flow packets in a jitter buffer 
(i.e., for the duration of translation process, packets have to be stored in some sort of 
buffer or temporary storage), re-sequencing (i.e., encrypting) the series of multi-media 
data flow packets into a pseudo-random order (i.e., the encrypted portions of the packet 
header are those portions relating to the source and destination hosts 31 , and 34 and 
packet sequencing information ... the receiving ASD peer 35 restores packet in 
accordance with a prearranged protocol. The result of this process is a restored packet 
identical to the original packet created by the sending host - Note that such restoration 
is required because packet header information such as sequence number has been 
randomized/encrypted before transmission)(col. 7, lines 1-26 and col. 9, lines 30-42), 
and transmitting each multi-media data flow packet in the re-sequenced series (col. 6, 
lines 19-67 and col. 7, lines 1-67 and col. 9, lines 13-29). 

Regarding claim 59, Fink discloses a system for encrypting multi-media data flow 
packets, comprising: 



V 
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a transceiver, software stored within said first endpoint defining functions to be 
performed by the system (col. 6, lines 19-60); and 

a processor configured by said software to perform the steps of: receiving a 
series of multi-media data flow packets, each packet comprising a sequence number, 
storing the series of multi-media data flow packets in a jitter buffer (i.e., for the duration 
of translation process, packets have to be stored in some sort of buffer or temporary 
storage), re-sequencing (i.e., encrypting) the series of multi-media data flow packets 
into a pseudo-random order (i.e., the encrypted portions of the packet header are those 
portions relating to the source and destination hosts 31 , and 34 and packet sequencing 
information ... the receiving ASD peer 35 restores packet in accordance with a 
prearranged protocol. The result of this process is a restored packet identical to the 
original packet created by the sending host - Note that such restoration is required 
because packet header information such as sequence number has been 
randomized/encrypted before transmission)(col. 7, lines 1-26 and col. 9, lines 30-42), 
and transmitting each multi-media data flow packet in the re-sequenced series (col. 6, 
lines 19-67 and col. 7, lines 1-67 and col. 9, lines 13-29). 

Regarding claims 46, 53, and 60, Fink discloses wherein said re-sequencing 
uses a randomization code that is algorithmically predictable if a key to said 
randomization code (i.e., encryption key) is known (col. 11, lines 29-67 and col. 12, lines 
1-6). 
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Regarding claims 47-49 and 54-56, Fink discloses further comprising the step of 
performing bit manipulation within said first multi-media data flow packet (col. 9, lines 
44-67 and col. 10, lines 1-19). 

Regarding claims 50-51 and 57-58, Fink discloses the step of pseudo-randomly 
shuffling (i.e., encrypting using a encryption key) a destination address of each of the 
multi-media data flow packets (i.e., the ASD technique seemlesslyJayers with data 
security technologies such as IPSEC and Secure Socket Layer (SSL) because it only 
affects addressing and sequencing information for translation/restoration, allowing it to 
be used to enhance existing network security systems)(col. 7, lines 1-15 and col. 9, 
lines 13-65). 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

Claims 67 and 70-73 are rejected under 35 U.S.C. 103(a) as being unpatentable 

over Fink et al., (U.S. Patent No. 6,826,684 and Fink hereinafter), in view of Akiyama et 

al., (U.S. Patent No. 5,623,548 and Akiyama hereinafter). 
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Regarding claim 67, Fink discloses a method of encrypting a series of multi- 
media data flow packets, comprising the steps of: 

receiving a series of multi-media data flow packets belonging to a first flow, each 
packet in the series having the same port address, generating a pseudo-random 
sequence of numbers (i.e., non-repeating sequence number), the sequence associated 
with the port address (col. 8, lines 10-45 and col. 9, lines 1-29); and 

replacing the port address in each packet with the corresponding number in the 
sequence (i.e., To overcome keeping the portion of encrypted block from remaining 
constant, Fink uses exclusive ORing the N-bit unchanging block with the sequence 
parameter which is changing packet by packet), and transmitting each packet to a 
receiver (col. 9, lines 50-67). 

Moreover, Akiyama discloses replacing the port address in each packet with the 
corresponding number in the sequence (col. 10, lines 44-67 and col. 1 1 , lines 1-30 and 
col. 12, lines 1-43). 

Therefore, it would have been obvious to a person of ordinary skill in the art at 
the time of applicant's invention to modify teachings of Fink with teachings of Akiyama 
because it would allow to include replacing the port address in each packet with the 
corresponding number in the sequence as disclosed by Akiyama. This modification 
would have been obvious because one of ordinary skill in the art would have been 
motivated by the suggestion of Akiyama to provide randomization of input data to 
realize a cryptosystem virtually unbreakable through differential attack (Akiyama, col. 2, 
lines 45-54). 
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Regarding claim 70, Fink discloses wherein the generating step uses a 
randomization code that is predictable if a key to the randomization code is known (col. 
11, lines 15-67 and col. 12, lines 1-27). 

Regarding claim 71, Fink discloses wherein the key is known to the receiver (col. 
11, lines 15-67 and col. 12, lines 1-27). 

Regarding claim 72, Fink discloses wherein the size of the sequence is known to 
the receiver (col. 10, lines 13-67 and col. 11, lines 1-15). 

Regarding claim 73, Fink discloses wherein the port address comprises a 
destination port address (col. 9, Jines 13-30). 

Conclusion 

THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 . 1 36(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
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extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Arezoo Sherkat whose telephone number is (571) 272- 
3796. The examiner can normally be reached on 8:00-4:30 Monday-Friday. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on (571) 272-3795. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



A.S. 

Patent Examiner 
Group 2131 
Dec. 29, 2006 




